Changeset 1300

Timestamp:

05/17/2004 08:34:05 PM (22 years ago)

Author:

michelvaldrighi

Message:

using check_admin_referer for moves/deletions

Location:

trunk/wp-admin

Files:

• link-manager.php (modified) (6 diffs)
• users.php (modified) (3 diffs)

trunk/wp-admin/link-manager.php

@@ -86 +86 @@
     include_once('admin-header.php');
 
+    check_admin_referer();
+
     // check the current user's level first.
     if ($user_level < get_settings('links_minadminlevel'))
@@ -116 +118 @@
     $standalone = 1;
     include_once('admin-header.php');
+
+    check_admin_referer();
 
     // check the current user's level first.
@@ -154 +158 @@
     $standalone = 1;
     include_once('admin-header.php');
+
+    check_admin_referer();
+
     // check the current user's level first.
     if ($user_level < get_settings('links_minadminlevel'))
@@ -175 +182 @@
     $standalone = 1;
     include_once('admin-header.php');
+
+    check_admin_referer();
 
     $link_url = $_POST['linkurl'];
@@ -222 +231 @@
       $standalone = 1;
       include_once('admin-header.php');
+
+      check_admin_referer();
 
       $link_id = $_POST['link_id'];
@@ -265 +276 @@
     $standalone = 1;
     include_once('admin-header.php');
+
+    check_admin_referer();
 
     $link_id = $_GET["link_id"];

trunk/wp-admin/users.php

@@ -25 +25 @@
         $standalone = 1;
         require_once('admin-header.php');
+
+        check_admin_referer()
+
         function filter($value) {
                 return ereg('^[a-zA-Z0-9\_-\|]+$',$value);
@@ -102 +105 @@
         require_once('admin-header.php');
 
+        check_admin_referer()
+
         if (empty($_GET['prom'])) {
                 header('Location: users.php');
@@ -133 +138 @@
         $standalone = 1;
         require_once('admin-header.php');
+
+        check_admin_referer()
 
         $id = intval($_GET['id']);